Code-execution flaw in UEFI firmware affects most servers on planet Earth
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A buffer overflow in the PXE Base Code driver of TianoCore EDK II, tracked as CVE-2026-97631 and reportedly rated 9.5 of 10, lets an attacker with local network access run code before Secure Boot and TPM protections apply. Details leaked through a public AMI patch ahead of a planned January disclosure. Exploits need tuning per firmware build, and only network-booting systems are exposed. Builders should ask firmware vendors for guidance and consider disabling network boot. Most claims are unverified, and several vendors have not responded.